10/08/2026 | Press release | Distributed by Public on 10/08/2026 12:36
FORT MEADE, Md. - The National Security Agency (NSA) is joining the Federal Bureau of Investigation (FBI) and others in releasing the Cybersecurity Advisory (CSA), "Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data," to provide at-risk organizations with the information necessary to proactively defend their networks and protect critical data from cyber targeting.
Integrity Technology Group (Integrity Tech), a China-based company with links to the Chinese government, employs individuals who support malicious cyber activity in different ways, contributing to the larger Chinese cyber ecosystem that aims to exfiltrate sensitive data from victims around the world, according to the report.
Using various tools and techniques, which the report outlines, Integrity Tech has enabled Chinese government-linked threat actors to exploit U.S. and foreign organizations' networks across multiple sectors, including government services and facilities, critical manufacturing, healthcare, public health and information technology. The actors have also targeted victims in U.S. law enforcement, education and religious organizations, as well as organizations across Southeast Asia, Africa, and North America.
Some of the malicious actors enabled by Integrity Tech use tactics, techniques, and procedures (TTPs) consistent with those referred to in industry as Flax Typhoon, Storm 919, Ethereal Panda and Red Juliett.
Organizations are encouraged to review the TTPs and indicators of compromise outlined in this report to hunt for potential threat actor activity and better protect against this threat. Additionally, network defenders should review the provided detection and mitigation guidance to reduce the risk of threat actors compromising critical data.
Additional Resources
NSA Media Relations
[email protected]
443-634-0721
About the National Security Agency
The National Security Agency leads the U.S. Government in cryptology that encompasses both foreign signals intelligence (SIGINT) insights and cybersecurity products and services and provides the Nation decision advantage in competition, crisis, and conflict.
###